Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'Node.js third-party modules' disclosed a bug submitted by b'chybeta' 
b'[public] Path traversal using symlink'

28 Aug 2019

b'QIWI' disclosed a bug submitted by b'lincoln9932' 
b'account takeover https://teamplay.qiwi.com'

28 Aug 2019

b'QIWI' disclosed a bug submitted by b'lincoln9932' 
b'account takeover https://idea.qiwi.com/ '

28 Aug 2019

b'The Internet' disclosed a bug submitted by b'initstring' 
b'Ubuntu Linux privilege escalation (dirty_sock)'

28 Aug 2019

b'The Internet' disclosed a bug submitted by b'xairy' 
b'Linux kernel: CVE-2017-6074: DCCP double-free vulnerability'

27 Aug 2019

b'MyEtherWallet' disclosed a bug submitted by b'tw96' 
b'Local Storage Custom Node Credentials Leak'

27 Aug 2019

b'MyEtherWallet' disclosed a bug submitted by b'tw96' 
b'Malicious Node JavaScript Injection Leading to Theft of Private Keys and User Funds'

27 Aug 2019

b'New Relic' disclosed a bug submitted by b'sauravpratihar' 
b'Swiftype key stored in JavaScript source'

27 Aug 2019

b'Nextcloud' disclosed a bug submitted by b'ctulhu' 
b'Passcode Protection in Android Devices Can be Bypassed.'

27 Aug 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'niwasaki' 
b'SSRF in Search.gov via ?url= parameter'

26 Aug 2019

b'TTS Bug Bounty' disclosed a bug submitted by b'zephrfish' 
b'Subdomain Takeover due to unclaimed domain pointing to AWS'

26 Aug 2019

b'Twitter' disclosed a bug submitted by b'mr_edwards' 
b'Wrong Interpretation of URL encoded characters, showing different punny code leads to redirection on different domain'

26 Aug 2019

b'WordPress' disclosed a bug submitted by b'gnux' 
b"Reflected XSS on https://make.wordpress.org via 'channel' parameter"

26 Aug 2019

b'Notepad++' disclosed a bug submitted by b'ammm' 
b'Stack overflow affecting "ext" field on stylers.xml configuration file'

25 Aug 2019

b'Notepad++' disclosed a bug submitted by b'ammm' 
b'Stack overflow in XML Parsing'

25 Aug 2019

b'Node.js third-party modules' disclosed a bug submitted by b'toannc123' 
b'[statichttpserver] List any file in the folder by using path traversal.'

25 Aug 2019

b'Khan Academy' disclosed a bug submitted by b'katsuragicsl' 
b'Subdomain takeover on healthyhackathon.khanacademy.org and hackweek.khanacademy.org'

25 Aug 2019

b'ICQ' disclosed a bug submitted by b'superboyxxx' 
b'web.icq.com XSS in chat message via contact info'

24 Aug 2019

b'Vimeo' disclosed a bug submitted by b'dphoeniixx' 
b'Reflected File Download (RFD) in download video'

23 Aug 2019

b'Ubiquiti Networks' disclosed a bug submitted by b'smartnoob' 
b'Catch mails sent to an SMTP Server over SSL using an Evil SMTP Server'

22 Aug 2019

1 ... 394 395 396 397 398 ... 752

BY DENIS WERNER - @NOBBD - IMPRESSUM